Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/EfJwC--iYVueYwiF86WYq6KyDlE.roa
File: EfJwC--iYVueYwiF86WYq6KyDlE.roa (raw, json)
Hash identifier: k94wm8VXpQ1R5tG9MopC0FKvBdhBpp1E6A9j2GbMpZM=
Subject key identifier: 11:F2:70:0B:EF:A2:61:5B:9E:63:08:85:F3:A5:98:AB:A2:B2:0E:51
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01856BAEA3EA3BF7DBD9CA33315E9928C4D9
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/EfJwC--iYVueYwiF86WYq6KyDlE.roa
Signing time: Sun 01 Jan 2023 04:54:45 +0000
ROA not before: Sun 01 Jan 2023 04:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 31.6.1.0/24 maxlen: 24
31.6.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:a3:ea:3b:f7:db:d9:ca:33:31:5e:99:28:c4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 04:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11f2700befa2615b9e630885f3a598aba2b20e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:b3:c6:0d:16:84:52:64:09:10:db:d2:7c:
4e:c5:b7:a9:4b:d3:bf:60:ba:1c:07:5e:61:3d:da:
be:e0:2d:f3:c4:94:54:8a:9f:69:d8:3d:f8:60:18:
03:2d:4e:7e:b8:d3:5c:c8:90:11:5e:0a:f1:6c:69:
ad:01:b1:3e:17:2f:e6:53:ba:50:48:26:3b:fa:e6:
23:12:b7:93:42:01:3d:4e:68:f7:9c:73:22:ca:74:
8b:60:f5:b8:0f:e5:cb:36:ce:9d:e1:a6:0f:cc:86:
b8:ce:85:ba:68:06:8f:7b:1d:a8:c0:82:11:1b:a2:
b7:3b:92:68:7f:c6:61:2f:05:d2:c9:ca:11:83:4e:
23:92:96:2d:39:79:b9:e2:84:cc:f8:c9:29:ff:50:
e8:ad:62:98:db:b1:d4:37:8c:e6:0b:75:90:0d:cf:
ba:c1:eb:68:25:ee:97:32:b2:99:5e:b6:ff:ae:28:
79:9a:48:d0:88:91:74:5b:0a:55:c8:2d:5d:51:90:
a8:30:bc:71:2d:fc:f0:e7:e6:b6:19:f4:8b:57:6d:
ae:71:a8:5c:54:05:19:3b:b9:91:56:b7:b6:7e:e6:
71:a4:7f:32:0d:10:38:32:de:47:20:5a:7f:a9:b6:
b8:f4:93:67:af:c9:93:30:c3:5d:89:59:22:dc:02:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:70:0B:EF:A2:61:5B:9E:63:08:85:F3:A5:98:AB:A2:B2:0E:51
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/EfJwC--iYVueYwiF86WYq6KyDlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
31.6.16.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6d:96:58:4e:07:9e:ee:5e:36:01:e5:2b:02:64:3a:22:c1:
71:af:f4:0b:da:07:dc:f6:5b:e9:37:12:2f:a5:14:99:f6:bc:
1f:cb:97:a1:67:68:63:d2:85:6f:53:98:1e:9c:7b:41:9b:4c:
04:db:4b:bc:53:ae:11:1f:9d:02:97:98:d6:f3:49:30:da:d5:
78:f3:55:26:3b:43:5b:0f:f4:cc:a7:47:dd:c9:ee:28:6b:e4:
3e:c6:b8:5b:5a:63:71:fb:70:0a:e9:8b:1e:15:ee:73:94:ff:
92:00:ee:43:0b:5c:f5:c6:01:0a:42:7f:c2:ca:e8:10:38:f5:
1a:9b:04:cc:2f:21:06:cc:f9:86:21:47:75:1e:76:61:9e:81:
d1:7a:b3:b4:10:e6:fe:b0:3e:b4:0a:09:3f:0e:df:8c:7e:83:
0f:ea:2b:78:9a:af:32:7e:f3:82:3e:2e:ad:e2:d0:99:fb:42:
11:6a:32:58:72:80:1a:e4:d3:12:2f:42:b7:cc:31:7e:8d:0c:
9f:62:1e:78:b4:20:7d:3f:ef:b1:77:5c:63:8a:e9:d7:e3:81:
38:6b:14:26:07:6d:92:7a:bb:79:b8:a1:d3:bc:4a:3b:54:8c:
14:be:8c:fa:78:91:5e:0b:96:3e:f2:0b:8d:21:ff:76:1d:93:
68:bb:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org